vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #237 from jzelinskie/disable-ocsp

Browse source 
nginx: "temporarily" disable OCSP stapling
This commit is contained in:
Jake Moshenko 2015-07-14 17:37:46 -04:00
commit de99d6f017
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
conf/nginx.conf
View file

@ -14,10 +14,12 @@ http {
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_stapling on;
ssl_stapling_verify on;
ssl_prefer_server_ciphers on;
# TODO: learn wtf OCSP stapling is and do it the right way
#ssl_stapling on;
#ssl_stapling_verify off;
server {
include server-base.conf;